ssh tunnel to a remote DB when software does not support different cipher 1. create ssh tunnel ssh -p <ssh-port> -c <cipher_aes256-cb> -L 8888:<db-host>:<db-port_3306> <user>@<remote-host> 2. Open the application to connect to a DB 2.1 use db host => localhost 2.2 use db port => 8888